psp.eur.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:36:e6:b6:b4:40:0b:24:26:85:29:39:45:4c:ad:30:d9:1b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=psp.eur.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:e6:b6:b4:40:0b:24:26:85:29:39:45:4c:ad:30:d9:1b
Serial Number (int): 280018776701977980052847644114482914973979
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:90:4d:19:eb:89:26:a9:07:cd:0f:36:16:87:d6:d0:ad:a5:a5:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:23:5a:f5:a5:0e:3f:c8:2f:cf:ad:2a:a9:e7:82:7a:25:d7:f9:56
Fingerprint (sha256): 00:fe:33:a3:27:1a:d2:5d:17:20:b6:0e:83:24:a4:47:0d:3f:8d:c6:77:46:7a:8c:be:98:d5:b2:c4:e8:71:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate psp.eur.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psp.eur.nl

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psp.eur.nl
psptest.eur.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for psp.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAnCdHEO6w6o4GkWmo8SdJ
5rmnzv2cU30fF9/8D+6EGEcVO6WsVpTPw6aiT4FeN2BEe/OK3EBdbgPHk3yfpOL3
D08D2zdV9FfqfkzIFmWLntlZEzfXEqy9DSLtxdE5TOXYptU7KnKLzD9yIPtbXiGZ
RWhw1OOsbhnHy5x3uROInPUvtuNoohjKM1UAgTfqILLDU6OE06JRa+o1CgB4ENe8
i7x9ZbGSA7FQUT7EsDggvrmOx9Ms+emyhVtSwSpgFFP0Y6xiJYdPTxl+ubkSQ+qS
DSIOnqIF8ro/62rPWbM7zAa2upOSUq705L4JXCw9VpjlGpjX6WFfI69r9A6Mrxoz
rit+CXizqTOndYQBq+R+ovmHSPum4JZFNqSkMu2L/MAW0hKknfxLWZYixDKd3Klt
meKXDIFe1VEF9q1pT+yc6qd+vq/6NVtZdK1r8fhctbLJrmCc7kTRzZgWHx70jJJ7
Cmafn9ioRu58kd0OCv/c2hiiBOHnfYdzWiPQI/qNWEMZAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280018776701977980052847644114482914973979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 04:39:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 04:39:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psp.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3543710516721214577520885160521092631129431471348057297047195174422487200411339968674631291332103141844895660346130073570581860995672662633989111886840401408069831162548465466884865987377449832118716517786825740537217631876063008262771582434245147708613714780893802796024098298472741067034387993125215761910729615272990808233602478548451810364019023355132783460679727890133821536365595958167492926852911638988874417565363115345820395398029029205032783063439680878980180377894268683887931303680515833947472890231248314926837132787940731437500339333579629464017885892806084805842798216693357895174130763899252980024346411065823933560043377170771437969836060029871881645772555353073592674365516939966250440179690980110007535529050144150580919647480383864261907831212703082301453792912800817184206884550267470088493714440909015894378881689241666419963300847173972036551770626117547324387330482091386907513456278125805648553198361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33904d19eb8926a907cd0f361687d6d0ada5a5b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psp.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psptest.eur.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170c81ac81c000004030046304402201699ffc7e5219c1f8f5edcd5692796317cc9e1250d2c21ef552a61d8a15804cb02207956891855857d3515f34deb1e27d459150700e63879490f97f9c7860a23700d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c81ac81c0000040300483046022100de38d11d7bc6cb5a2bd2249f486ba9c157a4efa14a17b6f1097e024c389ef986022100818f2c2cea233bae8e844ecb786b426622311af818b758f2e175d96c52050380
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e96ee83f06b2518bc993eaef58055706506cbab632b984058c0c0337d3967a60c9a532bc26890740b215ba51609b18f8677a228bd475a8ba0ed29cbce3516008b6bf5b0b62cd5a295e65aef0b9e287b942096c225ce31613d291e0a51086183389f7dc5f8be1aae930ba4d7a2cf6f409bfb5aa74ceefc62851e6f423ce97770102fa9b1559b42ed8fac7ef8edec04dcf654ccb8556faa9cab19d27530699c166a5768366049626e2a4eaf86ff148e5daafde774bbd02b9f0edd6555ad361561dc9a2132eeb7f816a847edc8e82f6c5568c699aeb32dd4c6498e02421b3d8df1c4a663a2b9723e85131e46d02722639c3bcf441236764827cfb1d06b0f773a7e